Closing the gap of secure quantum key rate with the Heralded Pair-Coherent States 
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In this paper, we investigate the long-standing gap of quantum key rate between the Weak Co- 
herent Pulse (WCP) and Heralded Single Photon Sources(HSPS) implementation of quantum cryp- 
tographical protocol. We prove that, by utilizing the Heralded Pair Coherent State (HPCS) photon 
sources, such a gap can be actually filled in both BB84 and SARG quantum key distribution. Thus, 
a universal photon source which achieves the up-to-date optimal key rate for each transmission 
distance is obtained. 
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Quantum Key Distribution (QKD)[lJ, [2j is a powerful 
tool which allows two remote partners, Alice and Bob, to 
establish random and private keys with an unconditional 
security. However, the unavoidable quantum channel im- 
perfections, such as the high loss of transmission line and 
the dark counts of single photon detectors, impose severe 
limitations on both key generation rate and transmission 
distance of the practical quantum cryptographical appli- 
cations. 

Recently, to give a solution to these problems, much 
effort has been focused on both cryptography protocol 
itself and experimental configuration to give a further 
improvement of the performance of the state-of-art quan- 
tum cryptography system. This includes: (l)decoy state 
method where several coherent state with different in- 
tensities are used[3|, |4J, la, |fj, til la IS|i (2)searching for 
more efficient information reconciliation and privacy am- 
plification protocolpDj; (3)using spatial freedom of single 
photon 11] or by utilizing entanglement photon pairs to 
transfer more than 1 bit of information [13, [13(; (^explor- 
ing more efficient photon number distribution sources to 
generate a higher secure key rateflj, LL5J, |l6|, |l7(, and 
more experimentally, (5)applying the high-speed signal 
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modulation and single photon detection 

Of these efforts, the most efficient and prominent 
method is to bring (2) and (4) together, i.e., to use de- 
coy state technology and explore its application in dif- 
ferent kinds of photon source models. In Ref. 14 1, N. 
Liitkcnhaus gave a proposal of the superiority of the 
HSPS photon sources in implementing QKD protocols. 
Later, following this seminar work, a lot of work has 
been done to bring such a topic into a much wider 



collection of variations [15J, |20j, |21|. It is shown by T. 
Horikiri et al that the key rate can be improved with a 
HSPS sources and the secure distance can be prolonged 
from 140km to 170km for BB84 quantum cryptographi- 
cal protocol|l5|. Enlightened by such an observation, we 
gave a further consideration of the Scarani-Acm-Ribordy- 
Gisin(SARG) 22| protocol and proved that such a en- 
hancement from 95km to 120 km for SARG in the trans- 
mission distance can also been obtained 



211]. 



However, behind all these improvement in QKD prac- 
tical implementation, there exist a long-standing prob- 
lem that has not been addressed. That is the so- 
called gap of secure key rate between WCP and HSPS 
implementations of quantum cryptographical schemes. 
As is shown in Ref. 2l|, it is shown that there ex- 
ists a threshold distance of 136km for BB84 (93km for 
SARG) beyond which the secret key rate is only en- 
hanced and thus, the distance is greatly prolonged. How- 
ever, within such a threshold distance, HSPS+BB84 
(HSPS+SARG)has a less secure key generating rate than 
WCP+BB84(WCP+SARG). Put simply, to optimize the 
final performance, one should resort to WCP sources 
within the threshold distance but resort to HSPS sources 
if the distance is threshold-beyond. 

In commercialization of QKD, it is important to find 
a universal photon-emitting sources which is the opti- 
mal in secure key generating rate for each transmission 
distance. Then, a question that naturally arises is that 
whether there exists a universal photon sources for QKD 
applications. In this paper we give a proof that the an- 
swer is actually affirmative. 

Our derivation will be given by investigating the per- 
formance of Heralded Pair Coherent State (HPCS) and 
the corresponding Decoy State method. In this follow- 
ing, we will first start by introducing the famous GLLP 
formula for key generating rate and also the decoy state 
method. Then, we will move our attention to the decoy 
state implementation of BB84 and SARG protocol with 
HPCS sources. Finally, to obtain our conclusion, we give 
a numerical simulation with the same experiment param- 
eters taken from [23j as in Ref.|a.lla.l21|. 

Different from any classical key distributing protocol, 
the QKD protocol, such as BB84 and SARG, bases on 
its unconditional security on the fundaments of quantum 
physics. However, the security proof of these kind of pro- 
tocol has not been obtained until many years after their 
inventions |24j. The first simple proof of the single pho- 
ton key rate for BB84 is given by Shor and Preskill 25] . 
This proof is then further extended to explicitly accom- 
modate the imperfections in practical devices, e.g., the 



laser sources which occasionally emits multi-photon sig- 
nals in each emitting. It is shown that the secure key 
rate for imperfect laser sources can be given bv[26J: 

Rbbsi > -QJiEJHiEn) + Qi[l - H{e 1 )\, (1) 

where Q M is the Gain (the ratio of the number of Bob's 
detector counts to the number of signals Alice emites 
when they are using the same basis|5j) of Bob's detec- 
tor and Efi is the bit error rate (QBER) of sift key 
when the average photon number of the laser source is jU. 
H(x) — —xlog2X— (1 — x)log 2 (l — x) is the Binary Shan- 
non function. The function f{E^) is the efficiency of key 
reconciliation and is often assumed to be an constant 1.22 
for simplicity [6|. Q\,e\ is the corresponding gain and er- 
ror rate contributed by single-photon proportion of the 
laser source. 

In the rest of our paper, we will give a thorough anal- 
ysis of both BB84 and SARG protocol. So, it is now 
convenient to introduce the secure consideration relevant 
to SARG protocol. For SARG protocol, it is known that 
the security key rate Rbb&a contains the contribution of 
both single-photon and two-photon pulses [6|, |27| 

Rsarg > -Q li f{E ll )H{E l ,)+Q 1 [l-H{g{e 1 ))] 

+ Q 2 [l-H{h{e p<2 ))] (2) 

in which e Pi 2 = e 2 is the phase shift error rate contributed 
by double-photon pulses and g(-), h(-) are functions that 
can be obtained in the Appendix of Ref . [6| • 

In effect, the average gain Q^ of laser and the error 
rate E^ can be directly observed in experiments. To de- 
rive the unconditional secure key rate in Eq. (jTJ) and 
Eq. ([2|), what one is required to do is only to give an 
accurate estimation of Qi,ei,Q 2 ,e 2 . However, due to 
strong channel loss and all kinds of potential and pow- 
erful attacks by eavesdroppers, to obtained the required 
estimation is not a trivial. Fortunately, one can apply 
the decoy state method and continue our derivation. 

The main core of decoy state [3j, |j, [sj, [Z| is to replace 
the single intensity laser sources with signal states and 
decoys states which are generated respectively by lasers 
with different intensities. If the signal state and the de- 
coy state have the same wavelength, timing, and many 
other physical characters, no eavesdropper will be able 
to distinguish a decoy state from a signal state success- 
fully. Thus the condition probability that Bob's detec- 
tor clicks when a n-photon pulse is emitted from Al- 
ice will be the same for signal state and decoy state. 
If we use Y n to denote such a probability, we have 
Y n (signal) — Y n (decoy) — Y n and the error rate of n- 
photon pulse reads e n {signal) = e n {decoy) — e n . 

Typically, if we denote the intensity of signal state by 
/j,, the decoy state by i/j, u 2 , ■ ■ ■ , !/&( Here we assume, k 
different decoy state are involved.), by averaging over all 
the possible n-photon pulses, one can obtain that the 



overall gain Q M , Q Uk and over error EQ^, EQ Vk follows 

Q„ = 5^y„P(M,n), Q„ fc =^r„PK,n), (3) 

n n 

EQ^ = ^e n Y n P{n,n), EQ Vk = ^e n Y n P(v k ,nlf) 



where P(n, n) is the probability that the pulse con- 
tains n photon. E^, E v can be obtained by E^ — 
EQn/Qn,E Vk — EQ Vk /Q Vk . 

The laser sources that will be utilized in encoding of 
BB84 or SARG quantum signal is Heralded Pair Coher- 
ent State(HPCS). In fact, the Pair Coherent StatefPCS), 
which is originally proposed by G. S. Agarwal 28], is in 
essence another kind of photo-number correlated state. 
But we will see that its correlation is quite powerful and 
could induce a fundamental improvement compared with 
the HSPS state. According to Ref . 0, SH , the PCS is a 
two-mode correlated coherent and can be written in the 
Fock basis 
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(5) 



n=0 



where fi € C and Iq(-) is the modified Bessel's function 
of the first kind. Interestingly, by tracing over arbitrary 
one of the two modes, the photon number distribution 
follows Pl = Tt 2 [| M »«M|] = T^En^-HH which 
demonstrates a sub-poissonian statistics. To decrease the 
potential multi-photon pulses, we consider the photon 
heralding technique. After the generation, one mode of 
the PCS state is sent to a trigger detector (only distin- 
guish click and non-click) , and the other one is sent to the 
Alice's encoding module. Only when the trigger detector 
clicks, will the laser signal be deemed to have been sent 
to Bob. Therefore, when we consider the the probability 
that n-photon pulse is emitted form Alice enclave, the 
quantum detection efficien cy tj a and also the dark count 
rate d A should be included 15]: 



P(n,n) = - 

Jo 



1 fi 2n 



[l-(l-r ]A ) n + d A ]. (6) 



With the photon distribution in Eq. ([6]), we will be 
able to give a general theory of decoy state method for 
HPCS-based quantum key distribution schemes. The de- 
coy state method we present here is practical in the sense 
that we can fulfill such a task by only a finite different 
number of signal state and decoy state. In fact, it will 
be shown that only one signal state /i and two decoy 
state 1^1,^2(1 > fJ- > v\ > v 2 and v\ + v\ < /i 2 ) will be 
enough to give an estimation. First of all, it is sufficient 
to use only v\, v 2 and obtain the estimation of Y\ and e\. 
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FIG. 1: Comparison rate of HPCS+BB84 protocol with dif- 
ferent photon number distribution, t\a = 0.6, d A = 5 x 1CP 8 . 
For HSPS+BB84 sources, threshold distance is 136 km. The 
secret rate is optimal for each transmission distance. 
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Form I {2vi) x Q Vl - I (2v 2 ) x Qv 2 , we have 
I Q {2v 1 )Q Ul -I {2v 2 )Q^ 



,1n ,,2n 



= Y^a + d A ) + J2 y n - ( n2 2 [1 - (1 - VA) n + d A ] 



n>2 



(niy 



,2n 



< Yi(va + d A ) + -^-^ J2 r «frw t 1 - V- ^)" + dA ^ 



where in last line we have applied the relation i/f n — v 2 n < 
(y\ — ^|)/^ 2 " -4 for any n > 2. The lower bound for single 
photon gain Y\ can be obtained: 

Yi > Y^ V1 ' V2 

h(2 Vl )Q Vl - Iq(2v 2 )Q„ 2 - v -^ WfiQp - d A Y.) 



(VA + d A ) {v\ - J/2) - -Ljj 



Using a similar way, from Iq{2v\) x EQ Vl — Iq(2v 2 ) x 
EQ V2 , we have 



e-i < e 



1 ^ Cj 



(7,fi,«/ 2 _ h{2vi)EQ Ul - I (2v 2 )EQ U2 



(r, A + d A )Y 1 L (^-4) 



Furthermore, to derive the two-photon gain Yi and bit 
error rate e 2 , one need the help of the gain rate for signal 
state Qfj,: 



FIG. 2: Comparison rate of HPCS+SARG protocol with dif- 
ferent photon number distribution, tja = 0.6, dA = 5 x 10~ 8 . 
For HSPS+SARG sources, threshold distance is 93 km. The 
secret rate has been optimized . 



Plugging Eq. ^ into Eq.([3]), one gets 
1 i/ 2n 

Q* = E y " wo..w„n2 1 1 ~ 0- - vaT + d A ] (?) 



h(2 Vl )(n\f 



Qu-2 — y. in T 
_ 7 



(2v 2 ) (n!)' 



[1 - (1 - VA) n + d A ] (8) 



= TY n - 



i /i 2n 



n=2 



[l - (1 - »M) n + <k] 



= £r 



— -^[i-(i-^r+^] 



n=0 

n— oo 



+ S V "7 



n— 3 



(2M) (n!) 

1 /i 2 " 



[l-(l-ru) n + d A ].(ll) 



With some frustrating algebra manipulation, the two- 
photon gain and two-photon error rate can be given by 



Yo > Y 



EM 



[l-(l- VA ) 2 + d A ][(a 2 -b 2 ) 



-^ =w -M2v 1 )Q vl -I (2v 2 )Q, 



-Jo(2a*)O m 



+Y Q d A - 



e 2 < e 2 



^[(a-ft)- 



Brt _ vjh{2 Vl )EQ Vl - v(h{2v 2 )EQ V2 + Afrf - vi)Y d A 

Y 2 [i-(i- VA r+d A }^ 2 (^-4) 

i 



(12) 
(13) 



Now let's give some numerical simulation with the ex- perimental parameters taken from Ref/23j. To move on, 



we use the Q^, EQ M in the ideal scenario to replace the 
actual experiment and investigate the limitations of the 
key generation rate with HPCS. In precise, for a n-photon 
pulse which is not disturbed by eavesdropper, the expec- 
tation values of yields and bit error rate can be respec- 
tively evaluated[6(. For BB84: 



y n ,BB84 = [Vn + (1 - Vn)Pdark] A 
r\n^f- + (1 -Vn)Pda.rkJ 



e n .BBS4 



Y, 



n,BB84 



(14) 
(15) 



and for SARG: 



Y, 



n,SARG 



e n ,SARG 



n. 



/ e de t 



(1 



1 

Vn^ + (1 - ?/n)Pdarki 



Y, 



n,SARG 



Vn)Pd^k^, (16) 



(17) 



where Pdark is the dark count Bob's detector and 
e,}et stands for the misalignment of the optical instru- 
ment. r] n = 1 — (1 — rj) n and r\ denotes the total trans- 
mittance of quantum channel and Bob's enclaves. 

Substituting Eqs. ([I4])([15]) and Eq.© into Eqs. I®®, 

we get Q M ,BB84 = \(, - (1 - Pdark)C E Qli.BB8i = 

^ _ (e^ _ ate*) CE^bbm = EQ^ BBSi /Q^ BB8i . 



Similarly, for SARG protocol 

( £det I 1 \ £ _ I Bdet ll_ Pdark 

\ 2 T 4/ *» V 2 i 2 

/'edet _ Pdark \ f jp 
V 2 4 / "» ' ^( 



we obtain Q^sarg 
) (,EQ^.sarg - > 



edet t 



2 

£ = 1 



4 



fy.SARG 



e Qh,sarg/Q'h,sarg where 

Jq(2/j v /1-?7a) /■ 



(1 



^ /o(2m) 



/o(2 MA /(l-^)(l-r M )) 
/ (2/f) 

This ideal scenario is a good indication of the limi- 
tation of the performance of secure key rate. To see 
this, the single error e\ and Qi is obtained directly from 
Eq. lfK)]) and Eq. fTTj) . The parameters for trigger detec- 
tor arc ?]a = 0.6, cLa — 5 x 10 -8 as the ones chosen in 
Ref. [15j. The average photon number for signal state 
(i is optimized for each transmittance distance. As is 
shown in Fig [l] the original threshold distance for BB84 
at 136km, doesn't exist for HPCS state and an average 
gain of 1.5 in key generating rate can be observed. Fig. 
[H the SARG protocol within different implementation of 
photon sources is depicted. Comparison with the BB84, 
the average gain is much more prominent, which is about 
3.4 times than ever before. 

In summary, by investigating the sub-possion photon 
sources, we show the gap of secrete key rate between the 
WCP and HSPS implementations can be actually filled. 
For the Heralded Pair Coherent State, the threshold dis- 
tance does not exist and can be considered as a conve- 
nient and universal photon surces in QKD commercial- 
izations. However, we note that here, to look for a con- 
venient and efficient photon sources is still an open an 
important question for the future robust and high speed 
QKD application. 

After finishing our task we are aware that, more Re- 
cently, the generation of pair coherent state has also been 



addressed in Ref [29] . 
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